Heroes is the platform for running a Security Champions programme: recruit and coordinate your Champions, develop them, and measure whether the behaviour around them is changing. It is built on behavioural science, without you or your Champions needing to be behavioural scientists. Start with the base platform and add capability as your programme matures.
Rename the role to match your culture. Heroes adapts every label across the platform - so it speaks your organisation's language.
Most people recognise themselves in one of these. Each one shows what Heroes gives you from day one, and where an add-on module takes you when the programme is ready for it.

You have been asked to build a Champions programme, have never run one, and are doing it alongside everything else. You need something credible in place within a quarter.

You have a working network, or have inherited one. You need to know who is active, who is drifting, where the gaps are, and to stop losing track.

Completion is high, click rates have plateaued, and the board wants to know what the programme has changed rather than what it has delivered.

Your programme exists because of an incident, and you need to record the next one, see the pattern, and know which behaviour to work on because of it.

You run a network that spans divisions or countries. Coverage rests on a few people, and you cannot see where the next recruit would make the most difference.

Your network is already behaviour-led. What you lack is instrumentation, and every tool you are offered was built for a compliance team.
Every subscription starts with Base, which has everything a programme needs to recruit and coordinate Champions, change behaviour, and prove it. As your programme matures you may want to go deeper on evidence, network analysis, behavioural method, or risk. That is what the add-on modules are for. Risk & Incidents is available now and the rest are in development, and you are never paying for capability you cannot yet use.
For the founder and the coordinator, and everything a Champion touches.
Base is the whole platform for running a network: recruit and coordinate Champions, develop them, design and run interventions, and measure whether behaviour is changing. A programme that buys nothing else can still change behaviour and show it, through the Behaviour Index. Network Strength and Programme Capability arrive with the modules that build on it.
Single sign-on with Microsoft Entra ID, so your people reach Heroes through the identity they already use, with your own Entra multi-factor authentication policy applied at sign-in. Role-based access and mandatory MFA for privileged roles come as standard.
Each module is designed for a point a programme reaches, not a point it starts at. Risk & Incidents is available now; the other three are in development.
For the awareness lead and the CISO.
Adds Programme Capability, the composite measure of how well the programme is run, then trends, analyses and evidences change across every measure in a form a board will act on.
For the inheritor and the group programme manager.
Adds Network Strength, the composite measure of the network, and builds on the influence map Base captures: see the shape of your network in detail and target the recruits that will strengthen it most. Works on the data Measure & Evidence collects, so it is added alongside that module.
For the behavioural specialist.
The complete behavioural method and the workings behind every score, for the practitioner who wants the full toolkit.
For the security team.
Bring risk and incident management into the programme, so what happens on the ground shapes which behaviours you work on next.
Module names and contents are being finalised during early testing and may change. See Heroes pricing.
Short, unscripted recordings from inside the live platform. Start with the Base overview, or pick the feature you are weighing up from the list.
Videos load only when you press play. Hosted players may set their own cookies once playing. See our Trust Centre.
One platform for the full Champion lifecycle - from onboarding and training through to board-level reporting and programme maturity.
Base is included with every seat. The table shows what it gives you for each feature and where each add-on module takes that feature further. A dash means the module does not change it.
| Feature | BaseIncluded with every seat | Measure & EvidenceIn development | Network OptimisationIn development | Behavioural ScienceIn development | Risk & IncidentsAvailable now |
|---|---|---|---|---|---|
| Run the network | |||||
| Champion lifecycle, coverage map and status view | ✓Recommend, onboard, track and offboard every Champion; coverage across divisions, departments and sites | – | Succession planning, single-link coverage risk, and recruitment targeting drawn from the gaps | – | – |
| Tasks, events and engagement calendar | ✓Curated task library, engagement calendar, events and briefings | – | – | – | Briefing actions on live threats, logged against the Champion |
| Journeys, recognition and gamification | ✓Development journeys, XP and five tiers, badges, leaderboard, Champion of the Month | – | – | – | – |
| Comms Builder | ✓Behavioural comms builder with AI review, psychological safety and specificity checks | – | – | – | – |
| Training Academy | ✓Tiered curriculum by role, with certificates | – | – | – | – |
| Nudge, the AI guide | ✓On every page, for every role | – | – | – | – |
| Change behaviour | |||||
| Priority behaviours | ✓Three to eight behaviours chosen from the catalogue, driving dashboards, suggestions and tasks | – | – | – | Incidents tied to behaviours, with a recommended response: priority, campaign or intervention |
| Intervention Designer | ✓Guided eight-step designer in plain language, from naming a behaviour to scaling what worked, with a prediction committed before launch | – | – | The complete SHIELD designer with wave rollout and gates, COM-B diagnostic and scoring, change-wheel matching with the full technique library, the prediction pinned to SHIELD stages, and the framework vocabulary switchable on every screen | – |
| Prove it | |||||
| Behaviour Index | ✓Security behaviour as observed by colleagues, measured every wave | Trend over time with reliable-change testing; break down by team and site; drill to the behaviour and item behind any change | – | Full construction shown: signals, declared weights, what was withheld and why | – |
| Programme Capability | – | The composite measure of how well the programme is run, assessed by your programme and security team | – | Full construction shown | Risk handling added to the measure |
| Network Strength | – | – | The composite measure of the network, reported by the Champions themselves | Full construction shown | – |
| Instruments | ✓Peer pulse, monthly Champion check-ins and the Champion influence map | – | Interactive network analysis: bridges, isolates, reach and density; Champion 360 feedback from the colleagues each Champion supports | Instrument health and raw export under consent | – |
| Maturity and programme assessment | ✓Maturity survey and security team assessment, submitted quarterly | The full maturity profile: a capability level per dimension and the steps to the next level | – | – | – |
| Reporting | ✓Reports in plain language, six languages | Scheduled board packs, audit-mapped evidence packs, consent-gated peer benchmarking, and import of your programme history | – | – | – |
| Manage risk | |||||
| Risk register | – | – | – | – | Register, dashboard and heatmap, with reporting open to Champions and the whole workforce |
| Incident register | – | – | – | – | Incidents tied to behaviours, with a review queue and a recommended response for each |
| Threat intelligence | – | – | – | – | Written by your team in plain language, tagged by category, with a Champion feed and logged briefings |
Network Optimisation works on the data Measure & Evidence collects, so it is added alongside that module. Module names and contents are being finalised during early testing and may change. See Heroes pricing.
Nudge is built into every corner of CyBehave Heroes. Grounded in the COM-B model and CyBehave research, it is a genuine behavioural guide available to Champions, Programme Teams, and Programme Leaders around the clock.
Most security culture programmes stop at awareness. Heroes uses the COM-B model and Behaviour Change Wheel to diagnose why people behave the way they do - then designs interventions that last.
These models are put to work through SHIELD, CyBehave's six-stage behavioural change framework built purely for cybersecurity. Every Heartbeat reading, task, and intervention in the platform maps back to a SHIELD stage and a COM-B component, ensuring your programme effort is always directed at the right lever.
The full SHIELD method will be available through the Behavioural Science module, currently in development. The base platform carries a simplified version of it, built into the guided designer, so behaviour change follows a scientific methodology from day one without you needing to be a behavioural scientist.
The physical and psychological ability to perform secure behaviours. Skills, knowledge, and the cognitive function to apply them under pressure.
The environment that makes secure behaviour the easy, default choice. Social norms, tools, processes, and the absence of unnecessary friction.
The reflective intentions and automatic habits that drive secure behaviour. Incentives, beliefs, identity, and emotional responses to risk.
SHIELD runs Specify, Hypothesise, Intervene, Embed, Learn, and Diffuse as one continuous cycle, with sustainment engineered into every turn. Heroes is that cycle as working software: each stage has a home in the platform.
Define observable target behaviours during programme setup, prioritised by the risks that matter to your organisation.
Champion Check-Ins and Team Pulse diagnose which COM-B component is holding a behaviour back.
The Intervention Designer matches evidence-based techniques to the diagnosis before anything reaches delivery.
Champions carry interventions into their teams, backed by tasks, comms, and recognition in the flow of work.
Dashboards track behaviour and its drivers against baseline, so you know what worked and what to revisit.
Network analysis shows where Champion coverage is strong enough to scale what the evidence validated.
Most people running a Champions network do not come from behavioural science or cyberpsychology, and should not need to. So the base platform keeps the jargon to a minimum: plain, everyday language on every screen, with the science working underneath. The language only starts to shift when you enable advanced modules such as Behavioural Science.
Every screen speaks in clear, everyday terms. Run check-ins, design interventions, and read your dashboards without needing to know the theory underneath. The platform does the behavioural science for you, and keeps it out of your way.
Modules like Behavioural Science bring the terminology, the models and research behind each feature, and exactly how every measure is derived and weighted. The advanced wording arrives with the module and is switched on for the organisation, so everyone keeps the plain version until you choose otherwise.
Most platforms hand you three scores built from the same data, which is really one number shown three times. Heroes asks three different groups of people, so each score stands on its own. The Behaviour Index comes from the colleagues who work alongside your teams, is the one outcome measure, and is part of Base. Network Strength is reported by your Champions and comes with Network Optimisation. Programme Capability is assessed by your programme and security team and comes with Measure & Evidence. Behavioural Science shows how each is built. Nothing is counted twice, and no score is folded into another.
What the programme has in place to work with: leadership, resources and delivery.
100% of the evidence this measure uses
How capable, connected and far-reaching your Champion network is.
100% of the evidence this measure uses
70 respondents
Secure behaviour actually observed in teams. This is the outcome measure.
67% of the evidence this measure uses
Read 2 days ago
Programme Capability and Network Strength are shown here for completeness. Base collects the underlying signals and reports the Behaviour Index; the advanced data views on the programme and the network, including the two composite scores themselves, unlock with the Measure & Evidence and Network Optimisation add-on modules. See Heroes pricing.
Because the three scores come from different people, we never fold one into another, and we never claim one caused another. A stronger programme leading to a stronger network, and a stronger network leading to better behaviour, is something you can watch for in your own data rather than something we have baked into the maths. Every score opens into a longitudinal view with its full signal breakdown (through the Measure and Evidence module), exports to a spreadsheet, and always carries the date it was taken and how much of its evidence was actually there.
What we will not claim yet. After a few surveys we can tell a real change from normal wobble in your own numbers. Comparing your scores against other organisations needs data we simply do not have, so we do not pretend to. And proving the programme caused a change, rather than it happening anyway, takes a very specific kind of rollout. We are honest about where you are on that path rather than claiming more than the evidence supports.
The Training Academy gives your team access to the scientific methods and frameworks that underpin the Heroes platform - without requiring anyone to become a behavioural scientist. Each module is short and focused, bringing the key concepts to life through practical examples relevant to your security programme. Every module ends with a downloadable summary you can print out and refer back to, so learning stays accessible long after the session is complete.
Champions, security teams, and programme leaders each see the modules relevant to their role - building a shared language and evidence-based approach across the programme without overwhelming anyone with theory. The modules available reflect the platform capabilities you have purchased: Base comes with the curriculum that supports it, and each add-on module brings its own training with it.
COM-B and Behaviour Change Wheel foundations, dual-process theory (System 1 and 2), communication psychology, and critical thinking. Designed to be accessible to anyone - no prior scientific knowledge required.
Champion skills and team engagement, intervention design, programme management, measurement and evaluation, and social network analysis. Modules match each role's practical day-to-day needs.
Organisational culture and resistance to change, strategic reporting and programme maturity, and choice architecture. Each module includes a downloadable PDF summary to keep and refer back to.
Specialist Journeys are available for Champions who want to go deeper - self-enrol in optional pathways like Trusted Advisor or Risk Reporter to earn unique badges and develop specialist skills. As with the Academy, the Journeys on offer reflect the platform capabilities you have purchased.
Heroes is the platform - but the idea it serves is bigger. If Security Champions are new to you, start with why peer-led programmes change behaviour where top-down training cannot, and how to build a network from your first recruit.
What Champions are, the role they play across people, process and technology, and why they are your most important security investment.
A practical, staged journey for standing up a Champions programme - from identifying the right people to a self-sustaining network.
28-day free trial. No credit card required. Base in full from day one, and you add a module when you are ready.